langsmith vulnerabilities (Root)

5 vulnerabilities.

• langsmith Root Arbitrary server-side file read in LangSmith SDK TracingMiddleware CVE-2026-59152 Fix available 5.0 MediumJune 19, 2026
• langsmith Root LangSmith Client SDK: Public prompt pull deserializes untrusted manifests without trust boundary warning CVE-2026-45134 Fix available 7.1 HighMay 13, 2026
• langsmith Root LangSmith SDK: Streaming token events bypass output redaction CVE-2026-41182 Fix available 5.3 MediumApril 16, 2026
• langsmith Root LangSmith Client SDKs has Prototype Pollution in langsmith-sdk via Incomplete `__proto__` Guard in Internal lodash `set()` CVE-2026-40190 Fix available 5.6 MediumApril 10, 2026
• langsmith Root LangSmith Client SDK Affected by Server-Side Request Forgery via Tracing Header Injection CVE-2026-25528 Fix available 5.8 MediumFebruary 9, 2026